Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/HHPUAXZ0Ke0wAyUfhpX2ZpGrGMo.roa
File: HHPUAXZ0Ke0wAyUfhpX2ZpGrGMo.roa (raw, json)
Hash identifier: U4ZmtdVGevAoPOfa2FjLxZvQzl7TWZSvNi7Jaonopdo=
Subject key identifier: 1C:73:D4:01:76:74:29:ED:30:03:25:1F:86:95:F6:66:91:AB:18:CA
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 019D5F43B453703091C606049182FC7814C8
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/HHPUAXZ0Ke0wAyUfhpX2ZpGrGMo.roa
Signing time: Sun 05 Apr 2026 20:09:25 +0000
ROA not before: Sun 05 Apr 2026 20:09:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402267
IP address blocks: 144.56.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:5f:43:b4:53:70:30:91:c6:06:04:91:82:fc:78:14:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Apr 5 20:09:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c73d401767429ed3003251f8695f66691ab18ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1e:63:00:58:ad:75:ba:70:aa:0f:53:0b:76:
c5:f3:06:8f:38:d4:a5:b8:fe:af:e8:b4:34:51:fa:
00:27:e9:6f:6f:df:e6:5d:e6:45:eb:ba:b6:72:91:
73:ab:51:c4:4d:69:95:8b:b7:41:94:d8:2f:b9:31:
e2:ef:64:4f:00:12:30:c2:c3:ed:82:8e:75:75:e2:
b9:cb:74:1d:88:8f:88:d3:1c:54:74:dc:96:27:bc:
c2:2b:bd:37:13:45:ce:a9:92:10:cc:95:b7:d5:7a:
d6:74:55:6c:75:73:1b:17:84:34:93:b8:3c:b0:29:
48:af:46:2c:9a:3e:ec:49:e8:1e:6e:84:af:0c:39:
7d:71:44:3a:f4:41:26:c1:eb:cc:fb:3c:b8:7b:af:
4e:96:d1:70:c1:37:07:f4:3c:5f:e1:cc:0c:86:bf:
4f:3b:e7:a8:67:e5:14:92:8c:0f:5d:58:72:08:0e:
d2:9c:6a:be:ba:73:bb:da:4e:d5:4e:5c:69:b5:84:
ce:6c:56:78:cd:56:40:4f:78:1f:6f:c5:31:e2:3c:
7e:db:d5:74:94:eb:36:ff:32:a2:12:f2:e8:d6:03:
3a:c3:51:01:eb:f7:11:76:93:b5:d4:49:a0:ae:89:
0e:26:e9:2f:19:99:78:a8:98:ba:15:97:3b:05:2f:
2c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:73:D4:01:76:74:29:ED:30:03:25:1F:86:95:F6:66:91:AB:18:CA
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/HHPUAXZ0Ke0wAyUfhpX2ZpGrGMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.78.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:6b:2a:29:a9:07:1c:2c:2b:e6:98:3b:20:18:dd:c2:d6:c5:
17:5f:1c:4b:6f:cd:21:56:4e:09:45:59:a6:a3:29:a2:b2:d2:
37:08:97:98:d8:61:ea:95:03:e4:1e:10:50:70:80:76:d5:d0:
e7:9b:22:de:5d:2e:25:7c:e2:f8:12:26:26:99:5f:54:c9:c2:
9d:dc:90:82:df:b7:3a:07:60:e6:d4:65:3d:3a:49:04:30:e9:
77:9d:f3:78:22:04:f1:35:7e:1d:04:43:c8:ad:74:34:b5:bf:
bc:69:e1:d4:62:19:75:a9:50:a9:b0:e8:59:9f:36:10:19:e0:
d2:30:63:a4:2a:d4:96:41:e1:3a:af:0c:0d:9b:1a:4d:f8:35:
ca:06:6c:7b:2e:2d:5e:13:36:35:1c:91:8d:12:8c:71:5e:ea:
ac:4f:7e:db:cf:d8:a9:1c:52:b3:e3:57:ed:9c:73:e9:3a:70:
48:bf:9e:c9:82:68:ea:34:19:4f:42:4f:4a:ed:cb:4f:80:89:
97:68:00:17:b7:a3:39:39:4e:ac:71:97:7a:eb:72:89:21:19:
5d:f7:4c:c3:68:32:36:ce:43:b3:02:e4:ea:7a:16:c2:34:ad:
97:6c:0d:45:3f:29:0f:aa:d0:34:39:90:2b:6e:76:94:be:f7:
03:4a:75:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:23:41 2026 by rpki-client